[Bro-Dev] #329: Remove detect-protocols-http.bro from Broctl's default local.bro
Bro Tracker
bro at tracker.icir.org
Sun Dec 5 11:27:53 PST 2010
#329: Remove detect-protocols-http.bro from Broctl's default local.bro
-------------------------+--------------------
Reporter: seth | Owner: robin
Type: Task | Status: new
Priority: Normal | Milestone: Bro1.6
Component: BroControl | Version:
Resolution: | Keywords:
-------------------------+--------------------
Comment (by vern):
Two thoughts on keeping it by making it more efficient:
(1) Rewrite the for loop to instead use the '''match''' primitive.
(2) Provide language support for constructing a merged version of the
regular expressions listed in the table, and then first test whether
there's a match to the disjunction of them before bothering to loop over
to find which particular one matched.
--
Ticket URL: <http://tracker.icir.org/bro/ticket/329#comment:1>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list